AccountSubscribe

CVE-2026-20362 | Cisco Finesse Server-Side Request Forgery Vulnerability

Horizon3.aiOctober 28, 2026Vulnerabilities

MentionsCisco

CVE-2026-20362 is a high-severity SSRF vulnerability in Cisco Finesse discovered by Horizon3 researchers, with affected versions, mitigations, and a NodeZero Rapid Response test.

Summary from Horizon3.ai.

Read the full article at Horizon3.ai

Explained

The technology and terms in this story. Learn more

WeaknessServer-side request forgery · SSRFMaking a server fetch a URL of the attacker's choosing, often one inside the private network.
ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.

Why it was possible

The weaknesses behind this story's CVEs, from each CVE Record.

CWE-918Server-Side Request Forgery (SSRF)The server can be made to fetch a URL of the attacker's choosing, often internal services or cloud metadata.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

CVE-2026-20362High 7.2EPSS 0.6%

Other sources covering the same vulnerabilities or event.

SANS Stormcast Friday, October 9th, 2026: AI Agent Forensics; AI-Assisted Attack on South Korean Banks; IDN Typosquatting; Cisco Finesse SSRF (CVE-2026-20362)

Podcast6 minSANS Internet Storm Center StormCast19d agoVulnerabilitiesAICVE-2026-20362

More in Vulnerabilities

Digitate adds AI agents for patch planning, service desks, and SAP operations

Help Net Securityjust nowVulnerabilitiesAI

Adobe security advisory (AV26-1092)

Canadian Centre for Cyber Securityjust nowEndpointVulnerabilities

InfraTrust report warns of exploited flaws in critical network infrastructure

BleepingComputerjust nowNetworkVulnerabilities

Even after PHP2Shell, blast radius matters more than a CVSS score

BleepingComputerjust nowVulnerabilitiesAI

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

SecurityWeek1h agoVulnerabilities